Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PV4o1STutfS3xvaaM_lp2yRhQgI.roa
File: PV4o1STutfS3xvaaM_lp2yRhQgI.roa (raw, json)
Hash identifier: CtFbreRsiZN+JSEOP3XQkENlPej5MGz5xhNzEpPvdqM=
Subject key identifier: 3D:5E:28:D5:24:EE:B5:F4:B7:C6:F6:9A:33:F9:69:DB:24:61:42:02
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D424E048B0F3C6D5ED040C317C416
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PV4o1STutfS3xvaaM_lp2yRhQgI.roa
Signing time: Tue 02 Jan 2024 08:32:12 +0000
ROA not before: Tue 02 Jan 2024 08:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204879
IP address blocks: 212.111.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Oct 2024 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:42:4e:04:8b:0f:3c:6d:5e:d0:40:c3:17:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d5e28d524eeb5f4b7c6f69a33f969db24614202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:56:90:72:d2:69:19:5c:26:91:25:a0:a7:
4b:c2:88:6b:5d:b7:d4:60:f1:6b:4c:3e:a2:04:60:
8f:18:31:95:1c:1c:68:c2:4b:38:d2:b3:12:42:04:
76:4c:4f:da:4c:80:b9:f4:2e:5f:9c:38:34:09:7c:
4d:d5:78:4e:61:68:9a:23:7f:26:ad:91:b2:7a:82:
4d:1f:ed:9b:16:19:4e:f0:a1:ce:bb:e1:3b:8b:e5:
e2:12:cd:2f:aa:26:07:43:ce:c6:29:bf:46:71:34:
b3:0d:9c:f8:df:9b:fe:c3:9a:24:d2:d5:77:ae:fc:
f0:64:40:56:6e:1c:43:30:4b:38:52:ff:57:0a:0a:
34:21:ad:8d:4e:62:2a:46:8c:3e:36:b8:07:34:12:
49:f7:6d:fd:0e:76:5c:ce:48:4e:39:5e:eb:29:13:
01:07:09:19:e4:ff:1c:27:52:97:2e:01:46:37:6f:
65:37:10:ea:fc:16:0d:ac:f5:12:f2:a2:6e:cd:74:
e4:b2:9a:2b:48:20:f9:9f:cb:1f:f2:ed:e5:ce:1a:
a5:d6:2c:d1:67:96:aa:93:47:ad:3e:c9:f9:16:46:
13:e2:45:21:6f:3e:97:b7:2d:26:e5:6c:7a:0b:7f:
60:65:17:a1:ce:0d:dd:df:6d:02:15:b4:f5:5c:7e:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5E:28:D5:24:EE:B5:F4:B7:C6:F6:9A:33:F9:69:DB:24:61:42:02
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PV4o1STutfS3xvaaM_lp2yRhQgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d5:15:1b:b8:35:85:61:5d:9a:bb:45:87:c3:0f:17:3e:b9:
72:da:e6:b7:11:d2:f4:57:91:61:65:5b:e1:9d:45:2b:ea:55:
fb:36:42:75:1c:7b:b9:86:11:7f:ad:ea:a5:76:2c:9c:ed:8f:
49:ff:c5:c3:f5:ba:f6:bb:54:57:ef:46:a3:ef:bc:b5:7c:ea:
5c:41:32:9d:0a:5d:49:df:0f:3a:b8:fd:16:75:02:17:6e:b3:
45:dd:e9:29:8f:21:5f:5c:c6:48:a5:f7:66:3e:31:d3:bd:ac:
ab:ad:70:19:d2:cd:72:9b:10:bd:0b:61:33:15:a3:9c:78:e8:
5d:4f:60:f6:e2:c6:ad:b3:71:a4:51:05:24:b5:b0:ed:4e:24:
dd:ae:4c:75:d2:0d:8d:58:5b:5b:36:98:5b:4d:df:cb:95:b2:
85:bd:95:2a:67:3c:2c:9c:e3:df:e8:95:59:da:19:16:fa:ce:
05:21:87:e5:a7:ce:d0:b9:d5:72:c7:a0:c9:1a:20:42:32:f0:
b4:4c:7c:3d:3b:ed:a0:63:b1:9d:1d:6d:04:bf:94:1c:a1:b0:
75:4b:1d:a8:06:d1:ef:6e:c4:d6:4d:14:c7:92:79:84:2a:18:
c7:1e:86:97:3b:0a:79:1d:a0:77:93:71:4b:cf:95:c0:47:32:
e4:13:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 23:16:41 2024 by rpki-client on console-fra.rpki-client.org